networks:
  hs1-net:
  rc1-net:
  element-net:

services:
  traefik:
    image: traefik:v3.6.6
    profiles:
      - test
      - element
    command:
      - '--api.insecure=true'
      # - "--log.level=DEBUG"
      - '--providers.docker=true'
      - '--providers.docker.exposedbydefault=false'
      - '--entrypoints.web.address=:80'
      - '--entrypoints.websecure.address=:443'
    ports:
      - '80:80'
      - '443:443'
      - '8080:8080'
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./docker-compose/traefik/traefik.yml:/etc/traefik/traefik.yml:ro
      - ./docker-compose/traefik/dynamic_conf.yml:/etc/traefik/dynamic_conf.yml:ro
      - ./docker-compose/traefik/certs:/etc/traefik/certs:ro
      # - ./traefik-logs:/logs # Mount a volume for logs
    networks:
      # Defines and isolate one network per service to prevent inter service communication which
      # would not happen in real life. The name clashing between the host and service in the same
      # network (like rc1 service provided as rc1 host) is causing a bug on home server address
      # resolution which tries to communicate with the container directly some times and which does
      # not provide SSL neither the correct exposed ports.
      hs1-net:
        aliases: [hs1, rc1, rc.host]
      rc1-net:
        aliases: [hs1, rc1, rc.host]
      element-net:
        aliases: [hs1, rc1, rc.host, element]

  # HomeServer 1 (synapse)
  hs1:
    image: matrixdotorg/synapse:v1.157.2
    profiles:
      - test
      - element
    entrypoint: |
      sh -c
      "update-ca-certificates &&
      mkdir -p /data/media_store &&
      chown -R 991:991 /data &&
      /start.py &
      until curl -sf http://localhost:8008/_matrix/client/versions; do
        echo '=====> Waiting for Synapse...';
        sleep 2;
      done;
      echo '';
      echo '=====> Running register_new_matrix_user...';
      register_new_matrix_user -u admin -p admin --admin http://localhost:8008 -c /data/homeserver.yaml | sed 's/^/=======> /';
      register_new_matrix_user -u alice -p alice --admin http://localhost:8008 -c /data/homeserver.yaml | sed 's/^/=======> /';
      register_new_matrix_user -u bob -p bob --admin http://localhost:8008 -c /data/homeserver.yaml | sed 's/^/=======> /';
      register_new_matrix_user -u cleiton -p cleiton --admin http://localhost:8008 -c /data/homeserver.yaml | sed 's/^/=======> /';
      echo '=====> Finished register_new_matrix_user.';
      wait"
    volumes:
      - ./docker-compose/hs1/homeserver.yaml:/data/homeserver.yaml
      - ./docker-compose/hs1/hs1.log.config:/data/hs1.log.config
      - ./docker-compose/hs1/hs1.signing.key:/data/hs1.signing.key
      - ./docker-compose/traefik/certs/ca:/usr/local/share/ca-certificates
    networks:
      - hs1-net
    labels:
      - 'traefik.enable=true'
      - 'traefik.http.routers.hs1.rule=Host(`hs1`)'
      - 'traefik.http.routers.hs1.entrypoints=websecure'
      - 'traefik.http.routers.hs1.tls=true'
      - 'traefik.http.services.hs1.loadbalancer.server.port=8008'

  # Rocket.Chat rc1
  rc1:
    build:
      context: ${ROCKETCHAT_BUILD_CONTEXT:-./test/dist}
      dockerfile: ${ROCKETCHAT_DOCKERFILE:-../../../apps/meteor/.docker/Dockerfile.alpine}
      target: release-standard
    image: ${ROCKETCHAT_IMAGE:-rocketchat/rocket.chat:latest}
    profiles:
      - test
      - element
    environment:
      ROOT_URL: https://rc1
      PORT: 3000
      MONGO_URL: mongodb://mongo:27017/rc1?replicaSet=rs0
      NODE_EXTRA_CA_CERTS: /usr/local/share/ca-certificates/rootCA.pem
      LOG_LEVEL: debug
      ROCKETCHAT_LICENSE: ${ENTERPRISE_LICENSE_RC1}
      OVERWRITE_SETTING_Show_Setup_Wizard: completed
      OVERWRITE_SETTING_Federation_Service_Enabled: true
      OVERWRITE_SETTING_Federation_Service_Domain: rc1
      OVERWRITE_SETTING_Cloud_Workspace_Client_Id: temp_id
      OVERWRITE_SETTING_Cloud_Workspace_Client_Secret: temp_secret
      ADMIN_USERNAME: admin
      ADMIN_PASS: admin
      ADMIN_EMAIL: admin@admin.com
      TEST_MODE: api
    volumes:
      - ./docker-compose/traefik/certs/ca/rootCA.crt:/usr/local/share/ca-certificates/rootCA.pem
    networks:
      - rc1-net
    depends_on:
      - mongo
    labels:
      - 'traefik.enable=true'
      - 'traefik.http.routers.rc1.rule=Host(`rc1`)'
      - 'traefik.http.routers.rc1.entrypoints=websecure'
      - 'traefik.http.routers.rc1.tls=true'
      - 'traefik.http.services.rc1.loadbalancer.server.port=3000'
      # HTTPS Redirect
      - 'traefik.http.middlewares.rc1.redirectscheme.scheme=https'
      - 'traefik.http.routers.rc1-http.rule=Host(`rc1`)'
      - 'traefik.http.routers.rc1-http.middlewares=rc1'

  mongo:
    image: mongo:${MONGODB_FEDERATION_VERSION:-8.0}
    profiles:
      - test
      - element
    restart: on-failure
    ports:
      - '27017:27017'
    entrypoint: |
      bash -c
        "mongod --replSet rs0 --bind_ip_all &
          sleep 2;
          until mongosh --eval \"db.adminCommand('ping')\"; do
            echo '=====> Waiting for Mongo...';
            sleep 1;
          done;
          echo '=====> Initiating ReplSet...';
          mongosh --eval \"rs.initiate({_id: 'rs0', members: [{ _id: 0, host: 'mongo:27017' }]})\";
          echo '=====> Initiating ReplSet done...';
        wait"
    networks:
      - rc1-net

  element:
    image: vectorim/element-web
    profiles:
      - element
    # ports:
    #   - "8080:80"
    volumes:
      - ./docker-compose/element/config.json:/app/config.json
    networks:
      - element-net
    labels:
      - 'traefik.enable=true'
      - 'traefik.http.routers.element.rule=Host(`element`)'
      - 'traefik.http.routers.element.entrypoints=websecure'
      - 'traefik.http.routers.element.tls=true'
      - 'traefik.http.services.element.loadbalancer.server.port=80'
      # HTTPS Redirect
      - 'traefik.http.middlewares.element.redirectscheme.scheme=https'
      - 'traefik.http.routers.element-http.rule=Host(`element`)'
      - 'traefik.http.routers.element-http.middlewares=element'